$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f540c2b-f534-33a0-842f-d53e1f00041d.roa File: 1f540c2b-f534-33a0-842f-d53e1f00041d.roa (raw, json) Hash identifier: 0h67NqXRQfKSVwIbDfm6S+MBkWWZrgbUov2rwHKgpcg= Subject key identifier: B7:BF:DE:CC:14:B8:7A:E4:54:D4:5B:51:47:EF:66:4D:6D:3B:BB:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A33224764FD9F784417E340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f540c2b-f534-33a0-842f-d53e1f00041d.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.192.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:22:47:64:fd:9f:78:44:17:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=3f65bb03-a35b-4fd4-ba94-ae15f4a458b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:06:07:f8:47:2b:01:fe:03:e5:b5:dd:19: 9e:33:f7:6b:51:a4:d2:bd:57:11:67:30:c4:e6:c4: c4:3f:b1:4f:fd:53:62:08:32:a5:c6:ae:a6:29:63: 98:c1:36:c5:46:9d:60:e8:63:65:2b:25:79:55:57: 89:98:8f:c1:d8:69:c3:34:e6:85:e5:1c:27:b8:ed: 0a:c0:91:75:79:b5:3c:f0:ab:51:c8:20:34:52:04: fa:2f:b2:75:b2:1d:eb:d6:dd:40:6f:c4:58:92:61: 06:2d:ed:53:ca:81:5b:7e:3b:d6:1c:9d:ec:5f:aa: b8:a3:e9:96:28:a7:f9:21:fe:07:a9:07:2f:d0:8e: 52:e2:92:e3:60:04:6e:a5:49:7a:d9:a2:df:88:c0: 2e:aa:9e:cb:9b:fd:dd:ec:c1:f0:44:e7:d6:db:46: f1:a3:84:b0:46:89:bf:97:e2:d0:52:ae:8d:b8:80: 2f:98:63:50:e7:b2:36:71:25:42:eb:16:d8:6b:4d: c4:6f:7e:d4:0d:0a:28:bb:63:52:2b:b6:04:71:32: 00:00:12:b3:9f:d6:79:0a:87:45:28:82:50:f6:b4: 3f:bb:13:be:8d:b9:5e:d1:8f:47:3f:f6:0e:f8:ca: b3:ec:d3:d5:9a:f4:68:d4:f8:ad:2c:e8:ac:aa:6d: 00:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BF:DE:CC:14:B8:7A:E4:54:D4:5B:51:47:EF:66:4D:6D:3B:BB:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f540c2b-f534-33a0-842f-d53e1f00041d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:78:a5:86:70:72:4a:f0:84:8e:67:1c:92:54:61:1b:7c:e6: d6:2d:74:d7:df:b3:8a:8e:82:ee:7b:18:ce:8b:4c:65:1a:a0: 8e:e2:a4:2d:e1:58:6e:9b:71:d7:5f:a5:e0:a8:c8:d9:93:9d: 14:3b:7f:8f:2c:49:69:b6:e5:b8:1d:66:1f:af:35:6b:b9:11: 4f:86:11:e2:f9:82:ec:49:49:29:0d:9c:73:f3:6b:eb:ca:d2: d2:ea:a0:c6:40:98:dd:c6:28:56:70:4b:ab:e1:e3:9e:8a:85: 56:64:d3:e7:51:08:c1:6b:05:2b:86:d6:c6:f1:9e:52:11:4f: 5b:e3:94:06:e0:83:f5:13:97:7e:8c:8c:12:67:5b:91:58:59: 51:0d:89:d9:0b:fd:6e:6d:60:ed:ab:dd:9a:29:2b:a2:3d:ba: 98:92:f2:ba:81:ac:97:5a:7e:fe:54:27:15:a9:60:74:69:09: ec:5d:5f:3c:76:2e:9e:f9:6e:d1:5a:db:d6:f9:74:f5:52:8c: f6:f2:e1:c0:24:4a:d6:bc:f8:e2:e2:62:a3:03:54:ca:5c:27: 9c:df:db:fd:0c:51:59:01:7f:b5:21:c7:d0:83:d2:45:f6:99: 34:fc:b5:1a:db:4e:af:da:0c:ad:27:44:e6:b7:ab:e6:39:7c: 86:3e:b6:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMyJHZP2feEQX40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk M2Y2NWJiMDMtYTM1Yi00ZmQ0LWJhOTQtYWUxNWY0YTQ1OGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/IGB/hHKwH+A+W13RmeM/drUaTSvVcRZzDE 5sTEP7FP/VNiCDKlxq6mKWOYwTbFRp1g6GNlKyV5VVeJmI/B2GnDNOaF5RwnuO0K wJF1ebU88KtRyCA0UgT6L7J1sh3r1t1Ab8RYkmEGLe1TyoFbfjvWHJ3sX6q4o+mW KKf5If4HqQcv0I5S4pLjYARupUl62aLfiMAuqp7Lm/3d7MHwROfW20bxo4SwRom/ l+LQUq6NuIAvmGNQ57I2cSVC6xbYa03Eb37UDQoou2NSK7YEcTIAABKzn9Z5CodF KIJQ9rQ/uxO+jble0Y9HP/YO+Mqz7NPVmvRo1PitLOisqm0AtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLe/3swUuHrkVNRbUUfvZk1tO7s2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWY1NDBjMmItZjUzNC0z M2EwLTg0MmYtZDUzZTFmMDAwNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd4pYZwckrwhI5nHJJUYRt85tYtdNffs4qOgu57GM6LTGUaoI7ipC3h WG6bcddfpeCoyNmTnRQ7f48sSWm25bgdZh+vNWu5EU+GEeL5guxJSSkNnHPza+vK 0tLqoMZAmN3GKFZwS6vh456KhVZk0+dRCMFrBSuG1sbxnlIRT1vjlAbgg/UTl36M jBJnW5FYWVENidkL/W5tYO2r3ZopK6I9upiS8rqBrJdafv5UJxWpYHRpCexdXzx2 Lp75btFa29b5dPVSjPby4cAkSta8+OLiYqMDVMpcJ5zf2/0MUVkBf7Uhx9CD0kX2 mTT8tRrbTq/aDK0nROa3q+Y5fIY+tn8= -----END CERTIFICATE-----Generated at Mon Oct 12 22:08:43 2026 by rpki-client